Re: [cti-users] A request for assistance from the OASIS STIX/CybOX SC co-chairs

[Jerome Athias <athiasjerome@gmail.com>]

Would be interesting if we get similar results than that http://www.net-security.org/secworld.php?id=19068

On Tuesday, 27 October 2015, Trey Darley <trey@soltra.com> wrote:
> Hi, everybody -
>
> Just a reminder, please help us out by running the cti-stats utility
> against your CTI repository and submitting the statistics back to Ivan
> Kirillov (in cc) or me.
>
> Ivan and I plan to share these anonymized statistics with the
> STIX/CybOX standards committees but we will use an anonymous
> identifier for the information source.
>
> Here's what cti-stats output looks like run against HailATAXII:
>
> <snip>
> +-------STIX stats------------------------------------------------------+
> +-------STIX percentages------------------------------------------------+
> ttps: 0.91%
> indicators: 99.09%
> +-------STIX counts-----------------------------------------------------+
> ttps: 3442
> indicators: 374645
> Total STIX objects: 378087
>
> +-------CybOX stats-----------------------------------------------------+
> +-------CybOX percentages-----------------------------------------------+
> URI: 38.81%
> Address: 28.85%
> Port: 0.62%
> File: 0.30%
> DomainName: 31.41%
> +-------CybOX counts----------------------------------------------------+
> URI: 192292
> Address: 142963
> Port: 3089
> File: 1488
> DomainName: 155623
> Total CybOX objects: 495455
> </snip>
>
> If you don't feel comfortable sharing the object counts, you can just
> sent us the percentages. Even that we can use.
>
> Thanks in advance!
>
> --
> Cheers,
> Trey
> --
> Trey Darley
> Senior Security Engineer
> 4DAA 0A88 34BC 27C9 FD2B  A97E D3C6 5C74 0FB7 E430
> Soltra | An FS-ISAC & DTCC Company
> www.soltra.com
> --
> "There are only two hard things in Computer Science: cache
> invalidation and naming things." --Phil Karlton